New tests/adversarial/ suite covers each driver plus mb.kludge with
crafted-input scenarios: empty files, truncated headers, garbage
payloads, oversized length fields, infinite-loop bait. The
invariant under test is graceful degradation: no crash, no hang,
no OOM. Every allocation caps, every loop terminates, every
unreadable record returns False cleanly.
Coverage:
test_fuzz_jam 7 cases (.JHR/.JDT/.JDX/.JLR corruption)
test_fuzz_squish 5 cases (clen underflow, 2 GB clen, garbage idx)
test_fuzz_hudson 3 cases (bundle-file corruption)
test_fuzz_goldbase 2 cases
test_fuzz_pcboard 2 cases
test_fuzz_msg 4 cases (50 MB no-NUL body, strange names)
test_fuzz_kludge 3 cases (100 K CRs, 1 M CRs, legit round-trip)
run_tests.sh builds and runs them after the happy-path suite.
All 26 fuzz cases pass; all 47 existing tests still pass.